Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJr9dAtTSBGeURmuqianYQdzkDI.cer
File: TJr9dAtTSBGeURmuqianYQdzkDI.cer (raw, json)
Hash identifier: uoH8th/unYyw7T87iMGV++N86Y1d1BjGJ7qukslXngo=
Subject key identifier: 4C:9A:FD:74:0B:53:48:11:9E:51:19:AE:AA:26:A7:61:07:73:90:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349275A0B3C568724BE5CB7025A561F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/TJr9dAtTSBGeURmuqianYQdzkDI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.218.0/24
IP: 2a12:18c0::/29
Validation: Failed, certificate revoked on Wed 10 Apr 2024 07:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:27:5a:0b:3c:56:87:24:be:5c:b7:02:5a:56:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c9afd740b5348119e5119aeaa26a76107739032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:92:0a:d2:32:01:6c:c4:8c:51:41:08:38:
d2:2d:92:36:c2:68:b9:e2:a6:e4:9b:d5:6e:b5:55:
3e:e8:a3:47:f5:ad:db:7b:8c:32:df:17:b3:de:91:
8b:40:6b:8f:b4:18:70:65:14:d5:84:1f:5e:2a:c0:
eb:cb:30:db:c0:51:bd:d5:07:6f:4d:18:f7:2e:54:
ae:fe:f7:ec:ea:0e:24:40:d4:83:a6:37:42:37:40:
d7:5e:0a:5a:f2:e4:4d:f7:2e:01:c8:ed:58:f6:ee:
75:70:82:1c:a4:47:c1:66:2c:00:bb:5f:c4:b3:3a:
26:52:30:b7:33:f7:08:d5:6e:a1:8a:26:d5:03:7f:
e9:05:fb:46:73:d8:c0:88:82:99:3a:fb:8a:4c:de:
72:d9:10:05:48:2e:0f:3a:f4:e1:39:57:9b:83:5e:
e5:4f:2e:97:a8:68:49:0d:0f:cb:eb:d9:bd:1b:f3:
44:e0:0c:87:3d:3e:e8:85:99:69:e1:88:cc:e0:f3:
94:ed:e2:43:f1:cc:76:b7:69:08:0e:aa:f9:37:f1:
e7:8c:8b:7c:a9:28:bb:2c:01:d8:35:7a:19:3e:c0:
7c:6a:9a:10:9e:3d:36:8b:72:d2:0c:57:b9:52:44:
8e:2e:c3:16:d6:28:da:76:7e:3d:06:67:28:42:11:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:FD:74:0B:53:48:11:9E:51:19:AE:AA:26:A7:61:07:73:90:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22dad2-6c66-4d7d-a25b-5b62b370e55a/1/TJr9dAtTSBGeURmuqianYQdzkDI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.218.0/24
IPv6:
2a12:18c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:52:48:a7:4d:ed:79:61:d4:d6:68:3e:15:c4:4b:20:14:0f:
13:4c:a3:22:72:00:fb:29:b1:49:3e:0b:80:ba:f2:22:55:ee:
5a:68:f0:87:44:1a:63:32:5a:33:b0:e5:57:02:96:72:ed:67:
eb:b2:37:8f:5d:fe:91:98:21:44:22:ee:f9:9e:36:d7:7e:55:
a8:e1:3c:6f:1d:57:3f:05:80:31:a4:1b:65:c2:18:93:2a:83:
38:d6:6d:85:9d:b9:2f:08:bf:7f:a9:1c:8c:5d:15:5f:49:3d:
d6:71:ed:5c:a1:66:73:cc:37:62:a7:bb:54:81:8e:da:b7:ff:
f9:7d:94:ab:26:5c:79:36:5f:0f:5e:5f:84:43:3e:35:a5:24:
98:c9:d9:59:6d:63:f5:65:84:64:d3:e7:46:ea:96:ac:b9:bc:
0f:d2:85:cd:5b:8f:ae:94:be:0f:29:f6:d9:7e:d4:ab:2a:e6:
77:4c:3f:6e:a3:c1:78:6d:fa:63:bc:0c:c9:da:b7:ef:3c:e1:
f4:bb:11:4c:9b:f3:50:74:4f:55:25:58:22:0f:ee:7a:98:d2:
f3:52:05:07:c8:64:f5:8f:b1:51:99:51:60:e9:b9:80:ed:10:
e4:f4:05:ec:73:cd:af:d3:43:db:09:ab:6d:33:ba:96:b8:0c:
3d:be:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:10 2024 by rpki-client on console-ams.rpki-client.org